Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file.exe
-
Size
980KB
-
MD5
ccf45a2b8156c3214f68ddc2ff022877
-
SHA1
04797d186684f54089bd1fbd6b15161d904f3cea
-
SHA256
cacf2a81403b53afda568e4cfd9ff3896b20dbb85a4a4226d7ad98f21a9fe75f
-
SHA512
30df20b22644769c60922c7ff89e7b41b75623201302f66d0b7b8d4e281da6df9f44deb3721b49c2b27d8a8c23988e33ae1ff8e7533f0dbed5d00f17ecd6f356
-
SSDEEP
24576:0G9QyyAUOrvcLzgYWFyO8tXLdyLApnvg8Fm8kr:LyAUhzg3F6psWnvXG
Malware Config
Signatures
Files
-
file.exe.exe windows x64
19dd557f052aaceb3f17755413e930ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetDiskFreeSpaceExW
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
DefWindowProcA
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 894KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE